_drafts: finish ipv6

ref: #64 which is not fixed until this is released and also [CI SKIP].
This commit is contained in:
Aminda Suomalainen 2015-06-22 11:49:06 +03:00
parent 9018e76c45
commit e1e91bdc3c

View File

@ -18,8 +18,8 @@ The comments of that post are also totally lost.
## IPv4 ## IPv4
It's probably start with what is wrong with IPv4 and note that all modern It's probably start with what is wrong with IPv4 and note that all modern
operating systems (including Windows 7 and newer) are designed to work with operating systems (including Windows Vista and newer) are designed to work
IPv6 and disabling it may break some features. with IPv6 and disabling it may break some features.
There are no IPv4 addresses for everyone and that is why we have NATs in There are no IPv4 addresses for everyone and that is why we have NATs in
routers so we only have one IPv4 address facing the internet. That isn't routers so we only have one IPv4 address facing the internet. That isn't
@ -102,3 +102,80 @@ As I am talking so much about privacy extensions, I must probably tell
that you can disable them if you want. I have no idea if that is possible that you can disable them if you want. I have no idea if that is possible
with OS X so I don't say anything about it, I only know that it uses them with OS X so I don't say anything about it, I only know that it uses them
by default. by default.
Windows: start by disabling the randomization and then
```
netsh interface ipv6 set privacy state=disabled store=active
netsh interface ipv6 set privacy state=disabled store=persistent
```
Linux: check NetworkManager or whatever you use config files
(or connection editor) or use the
kernel option directly in `/etc/sysctl.conf` or preferably
`/etc/sysctl.d/<whatever>.conf`: `net.ipv6.conf.default.use_tempaddr=0`.
The numbers you can use here are:
* 0 — IPv6 Privacy Extensions are disabled.
* 1 — IPv6 Privacy Extensions are enabled, but **SLAAC-address is
preferred.**
* 2 — IPv6 Privacy Extensions are enabled and preferred. This is usually
the default and what you should use.
### Getting IPv6
For native connectivity I only know about Finland (links in the list in
Finnish)…
* [IPv6 in Finnish consumer connections](http://ape3000.com/ipv6/)
* At the time of writing Elisa and DNA which are two of three biggest
carriers (Sonera is missing) have IPv6 in all mobile connections, DNA
has IPv6 also in broadband connections and Elisa is working on it
and Sonera has 6rd.
* [Elisa's page on enabling IPv6](http://asiakastuki.elisa.fi/ohje/541)
* [DNA's page on IPv6](https://www.dna.fi/ipv6)
* [DNA's instructions for enabling IPv6 on different devices](https://www.dna.fi/ipv6-laitteet)
…but I can suggest searching the web for `yourISP IPv6` and contacting
their customer support asking when they are going to enable IPv6.
For tunneling there are multiple services, but I am only going to mention
Teredo shortly, it's the protocol of last resolt for accessing IPv6 sites
and Windows comes with it by default. The easiest way to enable it is
probably saving the following as `something.reg` and running it:
```
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters]
"AddrConfigControl"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition]
"Teredo_DefaultQualified"="Enabled"
"Teredo_State"="Enterprise Client"
"Teredo_ServerName"="teredo.trex.fi"
```
Short explanation:
* Enable looking up IPv6 records even with Teredo
* Enable Teredo…
* …even if we are in domain
* use teredo.trex.fi as Teredo server, you might want to use some server
that is more [near to you](https://en.wikipedia.org/wiki/Teredo_tunneling#Servers).
Linux: install package `miredo` and edit the server in `/etc/miredo.conf`
if needed.
And then check [ipv6-test.com](http://ipv6-test.com) and it should detect
your Teredo connectivity. Some browsers don't even attempt to use it, at
least I think Google Chrome did so.
## Further reading
* [Wikipedia's page on IPv6](https://en.wikipedia.org/wiki/IPv6)
* [Wikipedia's page on Teredo](https://en.wikipedia.org/wiki/Teredo_tunneling)
* [Microsoft Technet: A 5 Second Boot Optimization If Youve Disabled IPv6 on Windows Client and Server by setting DisabledComponents to 0xFFFFFFFF](http://blogs.technet.com/b/askpfeplat/archive/2014/09/15/a-5-second-boot-optimization-if-you-ve-disabled-ipv6-on-windows-client-and-server-by-setting-disabledcomponents-to-0xffffffff.aspx)
* TL;DR: depending on how you disabled IPv6 your boot might be 5
seconds lower and Microsoft discourages disabling it and they don't
test working without IPv6. Disabling IPv6 breaks e.g. HomeGroup.